wip uid/gid mapping

modules/servers/oauth2-proxy.nix

@@ -6,10 +6,19 @@
 let
   setup = import ../factories/mkserver.nix { inherit lib config; };
   cfg = config.my.servers.oauth2-proxy;
+  id = 967;
+  gid = id;
+  uid = id;
 in
 {
   options.my.servers.oauth2-proxy = setup.mkOptions "oauth2-proxy" "auth-proxy" 4180;
   config = lib.mkIf (cfg.enable && config.my.secureHost) {
+    users.groups.oauth2-proxy.gid = { inherit gid; };
+    users.users.oauth2-proxy = {
+      inherit uid;
+      isSystemUser = true;
+      group = "oauth2-proxy";
+    };
     sops.secrets.oauth2-proxy = {
       sopsFile = ../../secrets/env.yaml;
       restartUnits = [ "oauth2-proxy.service" ];